Warlock Ransomware Attackers Hit Water and Telecom Operators

Reported 01 Oct 2026 by otx · Severity: medium

The China-nexus threat group Longlegs continues to deploy Warlock ransomware by exploiting Microsoft SharePoint vulnerabilities, particularly the ToolShell exploit chain. Over the past two months, the group targeted at least four organizations including water utilities, telecommu